A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@mastery.net
Hiring: https://mastery.net/careers
Canonical: https://mastery.net/.well-known/security.txt
Encryption: https://mastery.net/.well-known/security.asc.pub
Expires: 2025-12-01T05:00:00.000Z
Preferred-Languages: en

-----BEGIN PGP SIGNATURE-----
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=q6nP
-----END PGP SIGNATURE-----